$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/200D0EAE13F911EEAD14AF35C4F9AE02.roa File: 200D0EAE13F911EEAD14AF35C4F9AE02.roa (raw, json) Hash identifier: 33q5IYS4eUMwA5WX/wLHyrh/qfM50KmRH0M7pnPulLc= Subject key identifier: 00:5E:CE:19:89:BB:02:7C:75:3C:A4:C8:D9:31:E0:B4:88:C2:8C:47 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 747E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/200D0EAE13F911EEAD14AF35C4F9AE02.roa Signing time: Mon 26 Jun 2023 08:12:00 +0000 ROA not before: Mon 26 Jun 2023 08:12:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138245 IP address blocks: 103.127.130.0/23 maxlen: 23 103.127.131.0/24 maxlen: 24 103.158.216.0/23 maxlen: 23 103.158.217.0/24 maxlen: 24 103.159.42.0/23 maxlen: 24 103.174.242.0/24 maxlen: 24 103.176.16.0/23 maxlen: 23 103.176.16.0/24 maxlen: 24 103.181.160.0/23 maxlen: 24 2001:df5:f980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29822 (0x747e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 26 08:12:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64994850-c51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:b8:5d:e7:ee:74:ad:fe:4a:96:77:4c:a3: 8f:ca:42:28:c2:29:15:a3:0b:8c:8c:d4:d0:e7:11: 3c:57:3c:f6:36:f7:a0:48:2e:13:cf:b1:d9:29:62: 3f:d5:6f:c7:25:5d:97:e6:e7:75:93:66:30:ea:2f: b6:47:a8:d6:05:e2:f4:12:c4:77:52:8c:ad:15:41: 08:10:fc:67:55:12:49:62:b9:79:b6:ec:1e:7f:42: f1:99:a0:11:53:6d:41:6f:4b:bf:b6:a2:b7:a8:d5: aa:04:41:e9:0c:d7:69:d7:08:67:1a:76:82:96:8b: 62:a8:dd:2a:65:ba:77:53:f2:78:5a:38:de:98:54: 5e:51:25:a7:fc:08:e8:a8:be:a9:0e:7d:c2:a2:d9: e6:ba:63:8d:48:80:12:88:ae:9f:48:de:4a:9b:06: 98:00:ef:3b:01:4e:44:c0:b7:48:17:23:6b:b5:4c: 8a:d0:f1:7d:22:43:1e:ac:3e:8a:19:3d:7d:1a:34: ba:27:c0:90:5d:78:70:49:32:fa:4f:de:49:0f:c8: b0:7a:03:54:55:0f:5c:01:53:66:8e:6f:7a:f8:06: 6d:de:8a:1b:3e:47:4d:10:08:80:e0:6e:e8:87:26: c5:fe:fb:eb:66:b7:4b:51:24:85:29:b1:89:a4:3e: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5E:CE:19:89:BB:02:7C:75:3C:A4:C8:D9:31:E0:B4:88:C2:8C:47 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/200D0EAE13F911EEAD14AF35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.130.0/23 103.158.216.0/23 103.159.42.0/23 103.174.242.0/24 103.176.16.0/23 103.181.160.0/23 IPv6: 2001:df5:f980::/48 Signature Algorithm: sha256WithRSAEncryption 43:bf:47:fb:a3:0f:46:24:37:98:46:cb:4b:e3:28:4c:bd:0c: 3d:f9:79:f6:c8:c5:d7:de:1c:58:aa:25:94:10:9b:e5:1e:b3: 15:cb:1a:b0:37:ef:1b:1d:61:bb:7d:49:e6:6d:22:88:03:0e: 21:a6:59:bd:0f:2c:03:21:2b:be:90:bc:7f:74:65:f8:5b:72: 6c:22:be:2b:9f:45:39:54:92:4a:d8:ad:88:84:9e:60:66:41: 2f:6e:df:a0:10:39:00:98:18:a5:6a:21:f0:0f:2d:9a:62:ab: 7c:64:1a:72:75:ba:35:c6:ee:8a:db:68:d5:b2:8f:7e:3f:81: 3e:9b:94:6f:e2:67:a8:9c:3d:60:28:da:dc:71:f8:19:3e:a6: 29:28:44:e3:67:ae:85:e7:27:7e:13:97:95:e3:9e:06:ac:4d: 14:2d:03:7d:08:aa:a4:fd:0d:0f:99:b8:90:3e:be:07:24:fc: ee:46:b1:70:68:81:40:d2:c2:7e:7b:1f:47:67:42:ce:c9:40: 19:f0:94:77:06:0d:4b:15:6d:f3:f5:ec:42:bd:a7:67:e7:48: 05:e2:fb:88:9a:37:a3:2f:11:29:e1:bd:92:bf:d3:8c:9f:a4: ef:88:cd:d7:48:3c:7e:d3:8a:64:d0:0e:02:56:a4:24:93:d0: 1c:55:77:4d -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICdH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjI2MDgxMjAwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk5NDg1MC1jNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDm4XefudK3+SpZ3TKOPykIowikVowuMjNTQ5xE8Vzz2NvegSC4Tz7HZKWI/ 1W/HJV2X5ud1k2Yw6i+2R6jWBeL0EsR3UoytFUEIEPxnVRJJYrl5tuwef0LxmaAR U21Bb0u/tqK3qNWqBEHpDNdp1whnGnaClotiqN0qZbp3U/J4WjjemFReUSWn/Ajo qL6pDn3CotnmumONSIASiK6fSN5KmwaYAO87AU5EwLdIFyNrtUyK0PF9IkMerD6K GT19GjS6J8CQXXhwSTL6T95JD8iwegNUVQ9cAVNmjm96+AZt3oobPkdNEAiA4G7o hybF/vvrZrdLUSSFKbGJpD6FuwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFABezhmJ uwJ8dTykyNkx4LSIwoxHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjAwRDBFQUUx M0Y5MTFFRUFEMTRBRjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MCoEAgABMCQDBAFnf4IDBAFnntgDBAFnnyoDBABnrvIDBAFnsBADBAFntaAw DwQCAAIwCQMHACABDfX5gDANBgkqhkiG9w0BAQsFAAOCAQEAQ79H+6MPRiQ3mEbL S+MoTL0MPfl59sjF194cWKollBCb5R6zFcsasDfvGx1hu31J5m0iiAMOIaZZvQ8s AyErvpC8f3Rl+FtybCK+K59FOVSSStitiISeYGZBL27foBA5AJgYpWoh8A8tmmKr fGQacnW6Ncbuitto1bKPfj+BPpuUb+JnqJw9YCja3HH4GT6mKShE42euhecnfhOX leOeBqxNFC0DfQiqpP0ND5m4kD6+ByT87kaxcGiBQNLCfnsfR2dCzslAGfCUdwYN SxVt8/XsQr2nZ+dIBeL7iJo3oy8RKeG9kr/TjJ+k74jN10g8ftOKZNAOAlakJJPQ HFV3TQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org